Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows
Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All
domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain controller
cloning.
Which cmdlet should you use?
A.
Get-ADGroupMember
B.
Get-ADDomainControllerPasswordReplicationPolicy
C.
Get-ADDomainControllerPasswordReplicationPolicyUsage
D.
Get-ADDomain
E.
Get-ADOptionalFeature
F.
Get-ADAccountAuthorizationGroup
Explanation:
One requirement for cloning a domain controller is an existing Windows Server 2012 DC that hosts the PDC
emulator role. You can run the Get-ADDomain and retrieve which server has the PDC emulator role.
Example: Command Prompt: C:\\PS>
Get-ADDomain
Output wouldinclude a line such as: PDCEmulator : Fabrikam-DC1.Fabrikam.com
Step-by-Step: Domain Controller Cloning
http://blogs.technet.com/b/canitpro/archive/2013/06/12/step-by-step-domain-controller-cloning.aspx
Get-ADDomain
https://technet.microsoft.com/en-us/library/ee617224.aspx
Isn’t the answer A “Get-ADGroupMember” ?
The domain controller has to be a member of the group “Cloneable Domain Controllers” to be cloned.
2
0
Agree A.
2
0
Kuba
June 29, 2016 at 11:14 pm
“You need to identify which domain controllers are authorized to be cloned by using virtual domain
controller cloning.”
You must to check which DC’s are in Clonable Domain Controllers group by Get-ADGroupMember. Answer A
2
0